$ rpki-client -vvf rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/8FA95EF2E52811ED863E8C34C4F9AE02.roa File: 8FA95EF2E52811ED863E8C34C4F9AE02.roa (raw, json) Hash identifier: omCiEcpTdoSSA8v2pVBPokGo6TjyH39dgP4oVNlCAI0= Subject key identifier: 5C:B3:1A:F9:19:F9:5F:C5:EA:3C:84:36:B1:DE:62:A7:81:EC:58:8E Certificate issuer: /CN=A9139322/serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013 Certificate serial: 04B6 Authority key identifier: ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/8FA95EF2E52811ED863E8C34C4F9AE02.roa Signing time: Tue 05 Sep 2023 00:51:32 +0000 ROA not before: Tue 05 Sep 2023 00:51:32 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 149448 IP address blocks: 103.24.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 02:39:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1206 (0x4b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139322/serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013 Validity Not Before: Sep 5 00:51:32 2023 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=64f67b94-23d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:81:e4:1b:4f:c9:e0:b9:5f:a2:32:61:dd:fd: f3:7e:df:82:38:4c:e3:88:d8:a9:aa:54:c3:28:df: de:fc:84:96:bd:09:d6:65:48:2e:c8:11:6f:d6:34: 17:d7:5c:64:e0:fa:60:ba:18:bb:0d:9d:f7:d9:f9: 09:70:ed:eb:e5:ab:30:a2:db:91:3c:d4:60:ea:97: 61:c2:0e:a3:da:34:74:9b:34:93:27:53:dc:a1:31: 46:04:fb:1d:9f:7d:9f:de:cc:5b:9e:2c:61:cc:e1: bd:40:d5:71:ca:6b:64:2c:39:9b:5b:cb:e5:b2:eb: 8d:68:81:51:35:5a:6f:ff:92:f3:23:21:62:1e:c1: 58:77:14:7c:53:12:e5:b3:ee:3b:19:91:e5:1a:d6: 82:f0:5f:2a:23:e3:58:47:43:69:fd:76:77:76:b2: dd:6c:25:b2:3d:d9:2b:ce:8d:ed:96:5f:3b:84:fb: 95:75:19:b3:15:5d:3b:f9:f7:75:fd:90:dc:50:88: 0f:e0:80:9c:15:91:0c:85:85:7e:04:de:7f:ea:1f: a5:b6:4d:d6:06:d0:2d:30:71:71:4c:11:33:a6:00: aa:ac:17:c1:3b:58:f1:c6:02:3e:85:2e:f8:81:db: 20:0b:6b:d3:35:2f:02:30:3c:33:de:d0:b6:bb:12: 09:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:B3:1A:F9:19:F9:5F:C5:EA:3C:84:36:B1:DE:62:A7:81:EC:58:8E X509v3 Authority Key Identifier: keyid:ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/8FA95EF2E52811ED863E8C34C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.24.218.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:8b:75:34:7a:0e:28:b0:d5:bb:e3:f2:8c:f1:9d:4d:c0:a8: f3:8d:38:e1:11:c4:68:36:86:4d:20:83:9c:ba:22:90:03:a9: 0f:69:c9:af:3b:fb:39:f9:d9:07:5d:ca:ad:77:3a:7e:3d:65: b3:23:88:81:cd:43:c3:33:c3:b8:1e:c1:4d:0c:4b:55:e6:90: d5:e1:2d:e2:17:eb:bc:49:6e:bd:12:a5:99:38:64:93:65:53: 55:14:eb:7e:c2:b4:f7:e0:45:bc:ca:4f:04:a8:df:ec:d8:ad: 89:f7:ca:97:7d:b2:dd:49:19:09:8d:2a:6a:0f:97:51:b8:5c: 2c:4a:cf:03:e1:51:45:59:ad:1a:b6:51:00:78:dc:56:c0:81: 4b:8d:02:6d:10:a5:69:95:1e:5b:6a:11:a7:4a:14:c8:9b:4c: 10:86:ee:23:62:ac:a4:e3:ab:0f:cb:20:8b:af:89:25:a2:89: c5:46:23:f9:11:8a:87:8b:7d:47:4b:49:fa:a4:aa:50:13:8a: 8f:27:71:77:f0:7e:6e:65:b9:74:25:9c:85:b1:1c:60:4b:c6: 6d:62:69:3c:ad:ac:7b:68:3e:a6:0d:04:a4:54:b7:29:6a:a6: b3:ee:dc:96:05:80:a4:12:f3:69:2c:d1:e3:f1:70:06:63:c7: 97:eb:9d:81 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBLYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzkzMjIxMTAvBgNVBAUTKEVEQzU0N0JEMEU2QzBDMDcwNkExODU4MzM4MzVGNjVF QTNDNzEwMTMwHhcNMjMwOTA1MDA1MTMyWhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGY2N2I5NC0yM2Q1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1YHkG0/J4LlfojJh3f3zft+COEzjiNipqlTDKN/e/ISWvQnWZUguyBFv1jQX 11xk4Ppguhi7DZ332fkJcO3r5aswotuRPNRg6pdhwg6j2jR0mzSTJ1PcoTFGBPsd n32f3sxbnixhzOG9QNVxymtkLDmbW8vlsuuNaIFRNVpv/5LzIyFiHsFYdxR8UxLl s+47GZHlGtaC8F8qI+NYR0Np/XZ3drLdbCWyPdkrzo3tll87hPuVdRmzFV07+fd1 /ZDcUIgP4ICcFZEMhYV+BN5/6h+ltk3WBtAtMHFxTBEzpgCqrBfBO1jxxgI+hS74 gdsgC2vTNS8CMDwz3tC2uxIJ8wIDAQABo4IClTCCApEwHQYDVR0OBBYEFFyzGvkZ +V/F6jyENrHeYqeB7FiOMB8GA1UdIwQYMBaAFO3FR70ObAwHBqGFgzg19l6jxxAT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTMyMi8yQ0IxRUVCQUY2 NTMxMUVCQTFCNEE2MUFDNEY5QUUwMi83Y1ZIdlE1c0RBY0dvWVdET0RYMlhxUEhF Qk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdjVkh2UTVzREFjR29ZV0RPRFgyWHFQSEVCTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzkzMjIvMkNCMUVFQkFGNjUzMTFFQkExQjRBNjFBQzRGOUFFMDIvOEZBOTVFRjJF NTI4MTFFRDg2M0U4QzM0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnGNowDQYJKoZIhvcNAQELBQADggEBAEqLdTR6Diiw1bvj 8ozxnU3AqPONOOERxGg2hk0gg5y6IpADqQ9pya87+zn52Qddyq13On49ZbMjiIHN Q8Mzw7gewU0MS1XmkNXhLeIX67xJbr0SpZk4ZJNlU1UU637CtPfgRbzKTwSo3+zY rYn3ypd9st1JGQmNKmoPl1G4XCxKzwPhUUVZrRq2UQB43FbAgUuNAm0QpWmVHltq EadKFMibTBCG7iNirKTjqw/LIIuviSWiicVGI/kRioeLfUdLSfqkqlATio8ncXfw fm5luXQlnIWxHGBLxm1iaTytrHtoPqYNBKRUtylqprPu3JYFgKQS82ks0ePxcAZj x5frnYE= -----END CERTIFICATE-----Generated at Sat Jun 1 04:59:01 2024 by rpki-client on console-fra.rpki-client.org